Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: 3w4jiO1VdbGmqtlF2HdxIjNkVdw9K8mFZKRLE6bC1BI=
Subject key identifier: 75:60:DF:B6:A9:49:B9:C3:8B:2C:38:37:58:FD:D0:CC:5A:F6:AD:A6
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 019D284E293A0AE63BF6E6297182F9318DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 1070
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: aV37UccCZlY+vDUdIygBBwGZ6cs85y5mInuNq+pEGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:29:3a:0a:e6:3b:f6:e6:29:71:82:f9:31:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=7560dfb6a949b9c38b2c383758fdd0cc5af6ada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:60:4c:7c:cc:a9:be:0c:25:01:6f:fa:86:
55:84:63:43:da:7c:25:c3:43:91:19:ee:a0:3b:ca:
cf:04:a5:15:c9:76:b1:82:69:c1:a4:8d:6b:df:72:
45:b3:13:05:75:2b:9f:fe:a7:75:22:d1:40:ca:f5:
9c:b6:a0:d5:5a:8e:1f:e0:cb:fc:7c:d2:e5:87:64:
d6:4e:0c:4b:f0:e1:c3:8a:cd:6a:e7:e8:c3:8d:11:
86:dd:4b:cc:4c:10:4a:4d:f2:06:cb:16:84:19:39:
40:69:47:ba:9f:20:92:a8:f8:46:59:4d:f5:80:b3:
41:39:14:d9:4d:04:ab:97:fa:d2:d4:fe:f1:07:31:
e6:7f:f7:96:c6:ef:dc:8d:4a:b0:6f:f3:fa:d9:25:
ab:46:8c:92:ff:b6:69:a7:eb:05:2a:b2:9f:c8:6e:
19:cd:53:93:cc:7d:a2:52:f6:2e:9b:29:da:e1:6e:
5f:4c:ff:d5:83:79:5b:9e:d0:c1:ba:02:fa:2e:ee:
8e:88:7f:a1:7b:79:31:16:46:fd:6a:9e:e6:7a:af:
c2:26:af:82:25:52:1b:2e:d6:5b:3e:8c:19:ca:e6:
b6:62:9a:cc:51:1c:be:a8:6a:4b:5f:5f:c7:ed:cc:
8d:18:86:9a:b3:8f:8c:a3:79:e3:ed:d7:39:a5:14:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:DF:B6:A9:49:B9:C3:8B:2C:38:37:58:FD:D0:CC:5A:F6:AD:A6
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:39:d6:bc:e1:74:ff:cb:d5:dc:99:8a:dd:5b:18:96:eb:d4:
87:0d:cc:b4:7c:16:cb:3b:e9:9b:3c:62:88:be:a4:0a:01:50:
10:23:86:7d:41:52:12:78:5d:14:39:a4:9f:cb:a4:7a:28:eb:
10:df:4f:9a:4e:01:2e:98:f9:bd:71:cd:56:65:03:e4:bb:28:
b3:f8:15:12:f4:cb:b9:26:56:9d:19:90:41:df:4a:df:de:bd:
e0:10:26:9a:0a:54:15:6a:ec:bf:8e:7b:46:3b:6e:08:8b:55:
fd:4e:de:6e:59:52:51:f9:25:bd:d1:61:94:54:e4:2a:41:f1:
7b:e4:24:a5:0f:63:0a:9b:84:92:32:4b:41:ce:c4:0c:da:a7:
12:be:ef:d3:5a:52:43:1e:c9:67:5d:eb:2e:c9:f7:e4:e6:68:
19:3a:f8:c6:0b:38:f8:98:64:a3:39:5e:3d:23:57:d4:d0:64:
d6:08:57:20:ee:d7:62:9d:08:f5:16:d3:72:a8:0e:4d:f6:d2:
bd:e4:9f:92:bc:ce:34:e9:11:e2:26:d9:fc:23:e8:c2:43:ab:
43:c6:a8:32:96:b6:81:0e:b0:b2:2f:c0:b2:c5:e5:a8:6d:4f:
7b:75:08:5c:07:90:0b:e5:6a:41:0a:4b:c3:99:9a:a1:78:00:
6a:b8:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:08 2026 by rpki-client